Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
File: e8sSfHzXeGBylriDhuiUrh3jhb8.mft (raw, json)
Hash identifier: 8J2z/0UuHH8GxJlvBFHFzWajpCq9Lid43hUu1gNTO0M=
Subject key identifier: 4A:D8:9A:CC:D4:4D:19:D1:52:E3:EA:56:D1:46:88:27:06:53:0B:80
Authority key identifier: 7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
Certificate issuer: /CN=7bcb127c7cd778607296b88386e894ae1de385bf
Certificate serial: 019CE6A48F74E0E143BD457C9B6229FA69FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
Manifest number: 04C0
Signing time: Fri 13 Mar 2026 10:01:10 +0000
Manifest this update: Fri 13 Mar 2026 10:01:10 +0000
Manifest next update: Sat 14 Mar 2026 10:01:10 +0000
Files and hashes: 1: UXWpgGFDnRE9Qd9B2_kQeDANeEU.roa (hash: 4rUA5GWn/3ql2gbHZLTVs1SZ20Xz3g2AjgFXRxPtMJw=)
2: e8sSfHzXeGBylriDhuiUrh3jhb8.crl (hash: +pAuc5R7LszUTigKkwnHxThaGUTUcQyzgNNgbDHbxrw=)
3: kkmKgi6g6HFL37DCnaadKvfK-YA.roa (hash: yjFJ1aHJiDzMEJQJojyjv8H/6rRO5DIEZ/IoW8c9H7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:8f:74:e0:e1:43:bd:45:7c:9b:62:29:fa:69:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bcb127c7cd778607296b88386e894ae1de385bf
Validity
Not Before: Mar 13 10:01:10 2026 GMT
Not After : Mar 14 10:01:10 2026 GMT
Subject: CN=4ad89accd44d19d152e3ea56d146882706530b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:b9:0c:c6:fb:8e:12:93:8e:98:de:f4:e8:
d1:b6:1f:05:a6:db:fa:2c:7f:9f:b1:f2:4a:82:0b:
a5:45:c8:b4:6c:85:64:4a:a4:21:66:ce:ea:0c:9c:
72:ce:43:3d:2c:ad:20:99:2d:0b:d8:1f:15:1f:f1:
bf:a1:c4:44:bf:a1:c9:50:6d:c3:d1:4a:62:72:c7:
e8:f5:5a:56:83:3f:c6:b4:32:cc:c7:ec:79:fc:f1:
d7:8a:ee:42:70:4b:d6:2d:00:15:ca:92:0a:86:e4:
a4:e3:9e:32:cd:3e:92:c8:7a:fd:19:9f:ad:b2:4a:
d6:da:39:38:6b:2e:88:45:69:2f:5f:44:31:98:3d:
ed:b9:ec:b2:57:2d:5a:de:47:b3:2a:b1:2e:c8:a5:
17:27:62:a1:46:22:99:b5:62:73:5b:de:71:1f:55:
34:e6:7a:c8:22:dc:b5:5b:86:7f:92:0c:86:d7:9a:
fc:e9:5c:9c:b3:3b:e0:1a:02:39:a2:ff:85:5d:18:
79:0a:e5:bb:4f:59:50:00:09:f6:82:97:04:83:3d:
fe:0a:c3:f1:8d:7d:46:26:db:eb:61:8f:fd:16:59:
4f:e7:82:9a:32:bb:a9:36:ae:1c:dc:b5:90:6e:aa:
7d:46:09:fe:00:04:ae:35:9e:97:8c:6a:fd:7c:b4:
62:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D8:9A:CC:D4:4D:19:D1:52:E3:EA:56:D1:46:88:27:06:53:0B:80
X509v3 Authority Key Identifier:
keyid:7B:CB:12:7C:7C:D7:78:60:72:96:B8:83:86:E8:94:AE:1D:E3:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8sSfHzXeGBylriDhuiUrh3jhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d60fd8-03d5-4aab-9dab-2e20a79f7145/1/e8sSfHzXeGBylriDhuiUrh3jhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:87:1c:c6:19:6e:58:8f:12:ea:e1:dd:be:1d:9c:ca:04:fa:
6e:41:d1:15:cd:eb:ce:90:c3:6b:82:5d:48:00:0e:47:9d:0f:
6e:e1:55:04:40:fb:8e:07:a0:93:2a:6e:73:fc:a1:48:8b:36:
45:85:ae:f3:a8:fa:36:ac:92:dd:d5:6a:e1:8b:80:5c:94:e6:
b8:0b:10:e9:a6:ff:53:d3:2e:4a:fb:93:30:d8:c7:5d:17:30:
f2:78:6d:90:c8:79:69:0b:3b:39:a8:97:7d:a4:67:63:53:07:
3c:b9:7c:56:4a:1e:6d:63:fd:e2:dd:1a:53:7c:0f:46:65:af:
11:64:48:ef:57:2f:60:6b:8d:65:15:f2:31:20:b7:ff:e1:38:
6e:8e:77:78:40:11:02:d0:49:12:c3:b7:a8:c5:e8:34:29:fa:
57:c9:d1:db:42:e2:6c:2a:d2:75:e9:b4:ca:70:60:23:48:5f:
13:e1:d0:a4:a6:7c:16:71:59:9d:01:45:39:3d:10:d2:3c:14:
f6:91:89:98:7a:af:77:20:7c:dd:47:60:1f:37:46:11:9b:c6:
0f:a5:43:64:4a:c9:72:52:23:35:d4:df:35:1f:15:10:2d:e5:
9a:9a:e5:30:d0:ec:6a:c8:2f:72:e3:22:cb:7f:3b:7f:fb:c4:
5a:2d:26:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:11:33 2026 by rpki-client